$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa File: d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa (raw, json) Hash identifier: CT+bMdIVqBJzy0r2lN1RsaKdD1t313AKT0dftche2yk= Subject key identifier: 87:E5:0D:F3:AF:DF:03:4C:9C:27:81:A0:5B:BF:7B:12:23:F3:AD:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C025C3F074317893E2832BD78115CB7F13D628A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa Signing time: Wed 13 Aug 2025 15:00:20 +0000 ROA not before: Wed 13 Aug 2025 15:00:20 +0000 ROA not after: Wed 17 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 18.96.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:5c:3f:07:43:17:89:3e:28:32:bd:78:11:5c:b7:f1:3d:62:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 13 15:00:20 2025 GMT Not After : Sep 17 23:59:59 2025 GMT Subject: serialNumber=496080345428825fe77615b5d3d661ca50ca67302d3b1f2ec6ee5b8dc35b5f57, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:25:64:00:17:31:19:19:3b:0b:b0:b7:57: 31:b0:f2:1b:fe:ff:b2:30:45:9f:3e:71:43:5c:84: de:9b:f7:50:65:ba:67:e3:7e:30:9f:b2:cf:13:6d: 97:e9:8a:03:24:dc:b1:a8:8a:5e:2b:b0:16:83:a8: ed:92:cd:59:d7:84:cf:13:ff:92:bc:cf:fe:09:70: 7d:d2:d5:72:b5:70:3e:9c:8e:2e:1b:af:a4:f8:64: af:82:66:f8:4f:f7:6c:69:07:3f:4e:74:56:dd:84: 78:19:59:83:d4:aa:da:9b:06:f6:05:15:a9:e0:69: 31:68:63:7c:f5:b2:bd:f8:ee:40:98:69:33:f9:44: 0d:48:ab:4c:75:b0:8b:02:54:4f:ee:97:60:7b:0e: 75:4a:71:b4:e4:73:b7:12:a2:c6:20:2a:07:67:78: 5a:03:1c:0e:e3:20:cc:25:f6:6d:2c:fc:73:59:36: 50:55:9e:a9:1d:40:3c:5b:01:46:33:5a:c9:f8:7d: 56:56:9f:20:12:a4:b4:a8:49:80:a2:50:ba:cc:ef: 14:ec:1a:4d:66:29:98:69:33:07:32:74:2e:42:fc: 09:db:58:de:03:59:75:a1:e4:60:83:c7:11:fb:91: 49:8f:7f:b4:11:12:76:78:eb:06:f0:17:c9:1c:88: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:0D:F3:AF:DF:03:4C:9C:27:81:A0:5B:BF:7B:12:23:F3:AD:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5ff663c-6577-4c42-9b77-ee5cef5cc05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.96.0.0/14 Signature Algorithm: sha256WithRSAEncryption 55:57:fd:02:95:a9:3d:6c:48:df:62:ad:9f:55:bb:71:59:90: a5:1c:a5:60:22:ea:76:36:75:26:7b:be:7e:02:fa:3a:08:ac: 89:6d:6d:e7:76:05:e3:33:34:c1:b0:4f:de:87:2a:c7:a0:7c: 01:a6:3a:c3:b2:5b:b7:5d:d1:3a:7c:a2:ec:7f:97:12:09:f3: 15:8c:82:06:05:e0:00:eb:2a:f3:e1:81:db:62:b9:dd:18:d3: 01:78:3b:08:c8:e2:40:60:4a:07:28:e7:a5:c1:6b:d0:43:41: 5f:56:21:f7:95:1f:6a:59:33:5a:43:c8:83:11:9c:7a:42:e0: 33:18:4e:19:36:93:e7:fd:bd:00:66:bf:de:96:2a:1b:4a:7e: e2:ba:97:3b:df:69:fa:77:27:37:7d:e4:c6:d4:3a:87:23:52: 57:55:e0:35:77:c6:1b:90:7e:79:14:70:de:93:95:96:cc:9b: b1:32:f2:fb:a8:97:54:fd:21:4a:e6:d3:77:06:15:41:7c:0a: cc:91:6a:51:8f:94:f9:a3:d9:78:01:6e:e9:de:eb:27:1e:04: d5:b6:cd:b8:60:01:bf:b9:2a:01:53:a0:5e:d1:16:0c:b3:03: fa:21:8b:66:f1:10:6e:c8:cd:c1:49:8b:53:d3:18:2a:7d:1c: 7a:7f:27:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfAJcPwdDF4k+KDK9eBFct/E9YoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODEzMTUwMDIwWhcNMjUwOTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTYwODAzNDU0Mjg4MjVmZTc3NjE1YjVkM2Q2NjFjYTUw Y2E2NzMwMmQzYjFmMmVjNmVlNWI4ZGMzNWI1ZjU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAmyVkABcxGRk7C7C3VzGw8hv+/7IwRZ8+cUNchN6b91Bl umfjfjCfss8TbZfpigMk3LGoil4rsBaDqO2SzVnXhM8T/5K8z/4JcH3S1XK1cD6c ji4br6T4ZK+CZvhP92xpBz9OdFbdhHgZWYPUqtqbBvYFFangaTFoY3z1sr347kCY aTP5RA1Iq0x1sIsCVE/ul2B7DnVKcbTkc7cSosYgKgdneFoDHA7jIMwl9m0s/HNZ NlBVnqkdQDxbAUYzWsn4fVZWnyASpLSoSYCiULrM7xTsGk1mKZhpMwcydC5C/Anb WN4DWXWh5GCDxxH7kUmPf7QREnZ46wbwF8kciOKTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUh+UN86/fA0ycJ4GgW797EiPzrQYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1ZmY2NjNjLTY1NzctNGM0Mi05Yjc3LWVlNWNlZjVjYzA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISYDANBgkqhkiG9w0BAQsFAAOCAQEAVVf9ApWpPWxI32Ktn1W7cVmQpRyl YCLqdjZ1Jnu+fgL6OgisiW1t53YF4zM0wbBP3ocqx6B8AaY6w7Jbt13ROnyi7H+X EgnzFYyCBgXgAOsq8+GB22K53RjTAXg7CMjiQGBKByjnpcFr0ENBX1Yh95Ufalkz WkPIgxGcekLgMxhOGTaT5/29AGa/3pYqG0p+4rqXO99p+ncnN33kxtQ6hyNSV1Xg NXfGG5B+eRRw3pOVlsybsTLy+6iXVP0hSubTdwYVQXwKzJFqUY+U+aPZeAFu6d7r Jx4E1bbNuGABv7kqAVOgXtEWDLMD+iGLZvEQbsjNwUmLU9MYKn0cen8nRA== -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:11 2025 by rpki-client